The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives.

Three feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned.

Researchers from multiple security firms observed a variant of Mini Shai-Hulud, self-replicating malware linked to TeamPCP, in all the affected packages.

The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain unknown.

CrowdStrike says The Com-affiliated threat groups are using voice phishing and fake SSO pages to break into SaaS environments and steal data fast for extortion.

Two major hacking groups have pushed the bureau to adapt how they respond to stealthier, more patient attacks, a top FBI official said.

The financially motivated threat group demonstrates deep knowledge of hybrid cloud environments, which allows it to rapidly steal sensitive data, destroy backups and encrypt systems for ransomware.

The China-affiliated espionage group, which CrowdStrike tracks as Murky Panda, has been linked to more than a dozen incident response cases since late spring.

The presentation Monday revises the old Spectre vulnerability in a new scenario, demonstrating there’s not enough focus on the danger.